Re: [squid-users] Squid and ufdbGuard, display blocked URL on client browser address bar

2015-07-09 Thread Amos Jeffries
On 10/07/2015 9:51 a.m., David Touzeau wrote: > Hi ikna > > This can be done, but you need to forget the ufdbgclient and create > yourself a new one that is able to connect to the ufdbguard server in > order to get ufdbguard results. > In this case, you have with your code to replace the OK statu

Re: [squid-users] sslbump and caching of generated cert

2015-07-09 Thread Amos Jeffries
On 10/07/2015 7:03 a.m., Alex Wu wrote: > It seems the option http_port cannot be put under each process ID. If using > workers, http_port cannot bind to ports specified from http_port. > ?? Works for me and many others. What I dont expect to work is the *same* port line in two specific workers

Re: [squid-users] Squid 3.5.6 build switches seem to not work.

2015-07-09 Thread Amos Jeffries
On 10/07/2015 6:43 a.m., Tory M Blue wrote: > I had my build scripts working with the 3.5 betas, but i've switched over > to the mainline and I'm getting a ton of invalid switches. > > So far I've had to comment out the following, as I'm getting errors such as > > config.status: executing libtool

Re: [squid-users] Squid and ufdbGuard, display blocked URL on client browser address bar

2015-07-09 Thread David Touzeau
Hi ikna This can be done, but you need to forget the ufdbgclient and create yourself a new one that is able to connect to the ufdbguard server in order to get ufdbguard results. In this case, you have with your code to replace the OK status=302 url="" sent by ufdbguard server by OK rewrite-ur

Re: [squid-users] Issue with Citrix sessions and squid

2015-07-09 Thread David Touzeau
Hi Amos, Yuri We have created a dedicated port and added a dedicated network card. change all browsers settings of only one Citrix server to this dedicated network card/port. Issue is the same. Connection are broken... Le 08/07/2015 23:26, Amos Jeffries a écrit : On 9/07/2015 7:01 a.m., D

Re: [squid-users] Difference between Squid 3.1 & 3.4 regarding HTTPS CONNECT handling

2015-07-09 Thread Andrew Wood
OK heres the difference http_port 192.168.10.254:3128 intercept http_port 192.168.10.254:3129 I had to setup squid on a second port not in intercept mode and set the WPAD file to send HTTPS requests there. Why will the intercept port accept HTTPS CONNECT requests in 3.1 but not 3.4? Regard

[squid-users] Squid and ufdbGuard, display blocked URL on client browser address bar

2015-07-09 Thread Ikna Nou
Dear all,  We recently migrated from Squid3.4.13/squidGuard to Squid3.5/ufdbGuard With Squid3.4+squidguard, we were able to display on clients browser a customized error page showing ONLY the original URL request on the address bar. But, now: what we display on clients browser is: http://10.1.1.

Re: [squid-users] sslbump and caching of generated cert

2015-07-09 Thread Alex Wu
It seems the option http_port cannot be put under each process ID. If using workers, http_port cannot bind to ports specified from http_port. Alex > Date: Wed, 1 Jul 2015 14:56:46 +1200 > From: squ...@treenet.co.nz > To: alex_wu2...@hotmail.com; squid-users@lists.squid-cache.org > Subject: Re: [s

[squid-users] Squid 3.5.6 build switches seem to not work.

2015-07-09 Thread Tory M Blue
I had my build scripts working with the 3.5 betas, but i've switched over to the mainline and I'm getting a ton of invalid switches. So far I've had to comment out the following, as I'm getting errors such as config.status: executing libtool commands + --enable-snmp --enable-storeio=aufs,diskd,u

[squid-users] Difference between Squid 3.1 & 3.4 regarding HTTPS CONNECT handling

2015-07-09 Thread Andrew Wood
Ive had Squid 3.1 running on a Debian 7 server for a couple of years working in intercept mode for HTTP traffic and using WPAD to force HTTPS to be CONNECT tunneled through Squid and it works fine. Im now trying to set up a similar system for someone else using Squid 3.4 which is the version i

Re: [squid-users] Squid + kerberos, all childrens are busy

2015-07-09 Thread Amos Jeffries
On 9/07/2015 10:32 p.m., Дмитрий Рукавцов wrote: > > > >>> Четверг, 9 июля 2015, 22:06 +12:00 от Amos Jeffries : >>> >>> On 9/07/2015 9:54 p.m., Дмитрий Рукавцов wrote: Hello, i have a problem here :) System - freebsd 10.1, squid 3.5.5 + kerberos (MIT), 50 users total. Wit

Re: [squid-users] Squid + kerberos, all childrens are busy

2015-07-09 Thread Дмитрий Рукавцов
>>Четверг, 9 июля 2015, 22:06 +12:00 от Amos Jeffries : >> >>On 9/07/2015 9:54 p.m., Дмитрий Рукавцов wrote: >>> Hello, i have a problem here :) System - freebsd 10.1, squid 3.5.5 + >>> kerberos (MIT), 50 users total. >>> >>> Without any auth my squid works fine, system is not loaded. When i

Re: [squid-users] Squid + kerberos, all childrens are busy

2015-07-09 Thread Amos Jeffries
On 9/07/2015 9:54 p.m., Дмитрий Рукавцов wrote: > Hello, i have a problem here :) System - freebsd 10.1, squid 3.5.5 + > kerberos (MIT), 50 users total. > > Without any auth my squid works fine, system is not loaded. When i enable > Kerberos auth internet slowly goes down and crushing after a w

[squid-users] Squid + kerberos, all childrens are busy

2015-07-09 Thread Дмитрий Рукавцов
Hello, i have a problem here :) System - freebsd 10.1, squid 3.5.5 + kerberos (MIT), 50 users total. Without any auth my squid works fine, system is not loaded. When i enable Kerberos auth internet slowly goes down and crushing after a while, at logs i see: 2015/07/09 11:47:14 kid1| WARNING:

Re: [squid-users] Issue with Citrix sessions and squid

2015-07-09 Thread Stephen Borrill
On 08/07/2015 19:26, David Touzeau wrote: Dear I would like to share a strange behavior. We have servers that stores Citrix application. Each Citrix server run about 10 users/session Each session execute browsers connected to squid 3.5.6 or 3.3.13. After opening 10 tabs, browsers generates er